Who We Are:
At Northland, we’re enablers of change, united by our journey to transform the energy sector into the foundation for a sustainable future.
Since our inception, we’ve been early movers in the energy industry, adopting new initiatives that pave the way for communities across the globe and helping forge their path towards a carbon-neutral landscape.
We’re a different kind of independent power producer. As developers, owners and operators who are at the forefront of the energy transition, we’re uniquely positioned to leave a lasting impact in the regions where we operate. We’ve expanded our business across Canada, the United States, Latin America, Europe and Asia to become a global leader, all by bringing together industry experts to find solutions with an entrepreneurial mindset.
While our work powers communities across the globe, Northland is powered by our people.
Reporting to the Head of IT/OT Security & Compliance, the Information Security Officer & Senior Security Analyst, GRC, is responsible for information security governance, risk management, and compliance across IT and OT environments, with a primary focus on the EU NIS2 Directive and Poland’s National Cybersecurity System Act (KSC Act).
As the local information security authority and regulatory liaison for Poland, this role ensures compliance with local legal and regulatory requirements while aligning them with the organization’s global information security framework. The position serves as a trusted advisor to business leaders, maintains an auditable information security compliance posture, and supports the organization’s obligations as an essential or important entity under applicable critical infrastructure protection legislation.
The role is also a member of the global IT/OT Governance, Risk, and Compliance (GRC) team, contributing to the broader enterprise security program.
This position will be based in our Warsaw office. Additionally, this role will be 4 days in office per week, with one flexible day available for employees to work from home.
Key Responsibilities
Lead the implementation and ongoing management of critical infrastructure and information security compliance programs, including NIS2 and the Polish KSC Act.
Maintain and continuously improve the Information Security Management System (ISMS), ensuring compliance with regulatory, corporate, and industry standards (e.g., ISO 27001).
Serve as the primary liaison with regulators and critical infrastructure protection authorities, ensuring timely incident reporting, audit readiness, and regulatory compliance.
Identify, assess, and manage cyber and information security risks across IT and OT environments, including oversight of the enterprise cyber risk register and risk treatment activities.
Develop and maintain cybersecurity policies, standards, and governance frameworks, ensuring alignment between local regulatory requirements and global security practices.
Oversee compliance monitoring, internal and external audits, incident management, and the implementation of corrective actions.
Provide cybersecurity advisory support to business leaders and operational teams, embedding security requirements into business operations, projects, and strategic initiatives.
Manage third-party cybersecurity risk, including vendor assessments, due diligence, and ongoing oversight of critical service providers.
Deliver cybersecurity awareness and regulatory training programs and promote a strong security culture across the organization.
Drive continuous improvement of governance, risk, compliance, and security control effectiveness through metrics, reporting, and maturity assessments.
Who You Are:
Methodical and organized: You naturally work in a methodical way and relish the opportunity to add structure and order to your work. This will help with the competing priorities you will be managing.
Collaborative: You build relationships and enjoy working as a team player to get things done.
Independent: You are an…